[dogman144]

They do the IR retainer work for companies that are serious about security with real threats.

In other words, it is the company that detected a breach of its own systems via dogfooding, that turned out to be the only detection that occurred of a breach of the entire US govt more or less - Solarwinds.

Mandiant got the jump on every US govt agency in detecting arguably the largest espionage event of the digital age.

[hexo]

What is IR?

[dogman144]

(security) incident response. most companies have in-house security teams to do a portion or a lot of the IR process. If a serious breach occurs, a security team usually will call in a specialized team of consultants from an IR firm like Mandiant.